BigDiskBuster Vulnerability Blocks Microsoft Defender Updates
A security researcher has disclosed a Zero-day vulnerability named BigDiskBuster that can prevent Microsoft Defender from updating on Windows systems.
Security researcher Abdelhamid Naceri, also known as Nightmare Eclipse, has revealed a new Zero-day vulnerability dubbed BigDiskBuster. The vulnerability allows for the blocking of Microsoft Defender's update process on Windows operating systems.
According to disclosed details, the vulnerability affects all supported Windows versions, including Windows 10, Windows 11, and Windows Server. It can prevent Defender from downloading subsequent virus definitions and signatures, effectively stopping the antivirus software from receiving updates.
The researcher described BigDiskBuster as similar to the previously disclosed UnDefend vulnerability, classifying it as a Denial-of-Service Zero-day. Naceri stated he developed a tool that completely halts Defender updates, leaving users with the currently installed version.
This discovery highlights ongoing challenges in securing antivirus software and identifying potential exploits. Microsoft is expected to address this issue with a forthcoming security patch.